-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2016-02-29 19:02, Bernhard M. Wiedemann wrote:
On 2016-02-18 22:39, Christian Boltz wrote:
(In the long term, I'd love to have Factory reproducible - but we need to start somewhere.)
I started by fixing bind, libzypp and beaver via SRs to their devel projects.
Many more packages were fixed now via SRs to their devel projects I am still working on reproducible builds for openSUSE. Last weekend, I managed the first time to build rpms with 'osc build' that were every bit identical using the rpm+build versions from https://build.opensuse.org/project/show/home:bmwiedemann:reproducible for that to work, you also have to export SOURCE_DATE_EPOCH with a UNIX-timestamp number and add it to /etc/sudoers in the line with Defaults env_keep Python packages are tricky to get right, because .pyc and .pyo files contain timestamps of their source file and will not be used unless it matches exactly. Why do we (and redhat) even include them? In Debian packages have only .py files and the precompiled .pyc files get added upon package installation. It is even more tricky to get fully reproducible builds In OBS, because the build host name and signature time will vary. So for now I guess, I will continue working on fixing build-compare failures (e.g. from embedded timestamps, rebuild-counters or compile-time CPU detection)? Ciao Bernhard M. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlbmeR8ACgkQSTYLOx37oWSmKQCbBA6HKRWM8i9nDUI1wR9NYQQy 9Z4AoJh4zixwT1oW4IaeecTllU0KHCD2 =98VX -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org